https://github.com/KerfuffleV2 — various random open source projects.

  • 1 Post
  • 135 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle
  • The timing and similarity highly suggests this is a problem with how almost all software has implemented the webp standard in its image processing software.

    Did you read the article or the post? The point was that both places where the vulnerability was found probably used libwepb. So it’s not that there’s something inherently vulnerable in handling webp, just that they both used the same library which had a vulnerability. (Presumably the article was a little vague about the Apple side because the source wasn’t open/available.)

    given that the programs processing images often have escalated privileges.

    What? That sounds like a really strange thing to say. I guess one could argue it’s technically true because browsers can be considered “a program that processes images” and a browser component can end up in stuff with escalated privileges. That’s kind of a special case though and in general there’s no reason for the vast majority of programs that process images to have special privileges.








  • They found that in a community of 15,000 electric cars only 1.5 percent of batteries have been replaced if you exclude massive recalls […] The team also points out that most battery replacements happen when the car is still covered by a warranty.

    I’m not sure looking at the stats like that is really all that useful.

    There are two situations where the battery replacement happens:

    1. The user forks over the money to replace it personally.
    2. They manage to convince the manufacturer to cover the cost.

    It’s definitely not a given that everyone who wants to replace their battery can and does. This post is about longevity, so presumably most of the time in that situation the person will have to cover the cost of replacement themselves.

    I want to be clear, I’m not arguing against EVs. I’m just saying this article doesn’t really have enough information to draw a conclusion.


  • First, how is this different from having your IDE fill in your loop templates?

    I don’t do that actually, but I think there are some differences.

    1. One is if there’s a loop template in your IDE, you know it’s going to work. With LLMs you have to double check stuff (or just have it be wrong some of the time).
    2. You don’t have to type in a bunch of instructions to use a loop template. You also don’t really have to wait for the filled in template to get generated.
    3. People don’t usually use that because they just don’t know how to write the loop themselves, it’s a convenience feature.

    That said:

    I’m usually doing this for a customer in a language I’ll never use again.

    Maybe you’re the one in a million exception where this approach is a benefit. Most of the time when you talk to people on the internet, they’re going to assume you’re a reasonably typical case and not the extremely rare exception.


  • Right, but you can’t give it the variable names you’re using and have it fill them in, and if you want to do something inside that loop with

    Why are you actively trying to avoid learning how to write the loop? Are you planning to have ChatGPT fill in your loop templates for the rest of your life?

    But you do you, I’ll keep using ChatGPT and looking like a miracle worker.

    It’s going to be slower overall than just using the reference and learning how to do it. I really, really am skeptical that a developer at the level where they need that feature is going to seem like a miracle worker to anyone other than people who are just impressed when you can do anything with a computer.